$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63bacf3c-024b-3bc8-8817-2c6342eb1c72.roa File: 63bacf3c-024b-3bc8-8817-2c6342eb1c72.roa (raw, json) Hash identifier: h8DGy6ktoywgdihcgaTiUJrQ1PxlZ7C+3sNRF55lYVc= Subject key identifier: 61:5C:11:D3:CD:D7:52:93:B4:90:97:6C:3B:57:3E:B8:E2:FC:37:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF82B353D4D05967F00500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63bacf3c-024b-3bc8-8817-2c6342eb1c72.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:82:b3:53:d4:d0:59:67:f0:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=72da0d22-52ec-4bae-a98c-ed420ff1652a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:f1:1c:73:62:0f:0c:72:27:bb:20:e2:e6: 1c:1c:ce:52:0b:b1:28:2a:b4:23:83:be:da:8e:9f: 83:76:3f:1f:a5:11:12:ff:73:90:ed:f2:07:af:46: 5c:8f:35:fa:e1:c3:86:b2:15:3f:47:07:23:53:e0: 47:79:e1:3d:6a:6c:85:f4:86:41:79:20:29:35:63: 72:07:85:ce:21:c8:b3:a5:5d:a0:c6:6d:be:e0:1c: b6:3d:c9:37:ec:ab:1f:39:2c:27:b7:e6:96:e9:9b: e4:ad:77:0e:15:c7:35:44:6b:8e:b0:f1:2b:ba:5d: 06:95:2d:2c:b9:02:34:bc:60:f0:d5:c9:e1:10:38: 12:8d:e9:72:7c:c0:8f:68:d4:65:77:fa:bd:9c:bf: 7e:17:3c:16:70:58:24:4d:2a:13:e2:e0:95:d7:7b: 16:ec:dd:12:7f:3b:73:3e:42:a0:14:d5:cd:27:31: d1:a5:ac:e8:37:f1:37:3b:87:2a:66:12:d1:9e:01: 80:94:d0:64:1b:e7:06:e2:2f:2b:f7:cd:16:69:29: 33:53:b6:3d:d5:f7:83:ac:58:6b:11:7f:af:52:e7: 39:ca:27:c7:89:0f:ba:16:31:04:b8:f2:7d:41:17: 44:a6:76:14:44:36:a7:fb:4f:59:77:e8:db:5d:b9: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:11:D3:CD:D7:52:93:B4:90:97:6C:3B:57:3E:B8:E2:FC:37:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63bacf3c-024b-3bc8-8817-2c6342eb1c72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:88:08:6b:42:58:42:c8:df:15:5d:b0:ad:93:70:ad:2f:04: 79:59:26:ef:52:62:f6:c7:1a:46:38:0f:c5:27:41:88:81:69: c6:f5:da:73:a8:57:26:33:27:85:1e:2d:75:12:37:04:ac:ad: 25:38:cc:1f:d0:6d:7b:43:3c:1e:fc:a6:91:a6:ac:0e:f2:ff: 10:f6:68:71:29:81:52:81:02:a5:d1:0a:68:f4:49:9b:06:88: 0f:a1:c6:6b:d1:01:32:02:64:24:47:17:9f:b3:c0:db:4c:39: e7:55:a4:2a:8a:35:66:c5:66:e5:d0:b4:ea:9f:41:8b:f1:74: 3a:38:b5:40:27:c5:01:98:f4:fb:f2:2e:e0:51:ff:5b:43:b8: 61:8a:94:83:ac:0b:68:18:24:0d:5a:ef:50:d6:1d:7d:da:c8: d4:3f:30:4b:3e:52:21:33:46:84:c5:f1:80:14:5d:06:54:ba: 1d:d1:1a:c9:70:74:35:6c:97:39:35:31:1e:92:12:ea:c2:ec: 6b:0c:eb:af:cd:e6:4c:12:d9:a3:c5:13:70:aa:0b:e4:39:33: 0b:a5:81:c5:ed:e6:49:92:0d:07:56:d3:15:eb:84:9f:9b:0c: 1c:e9:d3:2f:34:6e:95:c6:2e:1c:34:59:37:8d:60:c5:e7:30: 17:1d:6b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34KzU9TQWWfwBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzJkYTBkMjItNTJlYy00YmFlLWE5OGMtZWQ0MjBmZjE2NTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR3xHHNiDwxyJ7sg4uYcHM5SC7EoKrQjg77a jp+Ddj8fpRES/3OQ7fIHr0ZcjzX64cOGshU/RwcjU+BHeeE9amyF9IZBeSApNWNy B4XOIcizpV2gxm2+4By2Pck37KsfOSwnt+aW6ZvkrXcOFcc1RGuOsPErul0GlS0s uQI0vGDw1cnhEDgSjelyfMCPaNRld/q9nL9+FzwWcFgkTSoT4uCV13sW7N0Sfztz PkKgFNXNJzHRpazoN/E3O4cqZhLRngGAlNBkG+cG4i8r980WaSkzU7Y91feDrFhr EX+vUuc5yifHiQ+6FjEEuPJ9QRdEpnYURDan+09Zd+jbXbmJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFcEdPN11KTtJCXbDtXPrji/DejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjNiYWNmM2MtMDI0Yi0z YmM4LTg4MTctMmM2MzQyZWIxYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGICGtCWELI3xVdsK2TcK0vBHlZJu9SYvbHGkY4D8UnQYiBacb12nOo VyYzJ4UeLXUSNwSsrSU4zB/QbXtDPB78ppGmrA7y/xD2aHEpgVKBAqXRCmj0SZsG iA+hxmvRATICZCRHF5+zwNtMOedVpCqKNWbFZuXQtOqfQYvxdDo4tUAnxQGY9Pvy LuBR/1tDuGGKlIOsC2gYJA1a71DWHX3ayNQ/MEs+UiEzRoTF8YAUXQZUuh3RGslw dDVslzk1MR6SEurC7GsM66/N5kwS2aPFE3CqC+Q5MwulgcXt5kmSDQdW0xXrhJ+b DBzp0y80bpXGLhw0WTeNYMXnMBcda/M= -----END CERTIFICATE-----Generated at Thu Mar 26 08:10:38 2026 by rpki-client